Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 79645

the process of establishing the authenticity of a person or other entity. Not to be confused with authorization - defining access rights to resources.

4 votes

Why isn't stealing cookies enough to authenticate?

The session was invalidated on the server. Secure websites do this to prevent exactly the kind of attack that you're describing. When you log out, the server deletes the session from its own database …
micheal65536's user avatar
  • 1,766
1 vote

Are reCAPTCHA enough to prevent brute-force password guesses?

I have seen sites that use a CAPTCHA after a "low" number of incorrect password attempts (such as 3) and then lock the account for a period of time (such as an hour) after a "high" number of incorrect …
micheal65536's user avatar
  • 1,766
4 votes
1 answer
237 views

Will 2FA protect me if there is a password breach?

Similarly, what about public key authentication (not 2FA, but there's no password to leak)? …
micheal65536's user avatar
  • 1,766